User with a role not declared on RBAC, can access the console

1. Create a broker with default values $ /path/to/amq782/bin/artemis create /tmp/broker782 --user admin --password admin --allow-anonymous 2. Add an additional user and role to broker $ printf "\nreadonly=reader" >> /tmp/broker782/etc/artemis-roles.properties $ printf "\nreader=reader" >> /tmp/broker782/etc/artemis-users.properties 3. Start broker $ /tmp/broker782/bin/artemis run 4. Try to access Management Console on http://localhost:8161 with these credentials: Username: reader Password: reader 5. User "reader" can read information on the left side on the screen